Hi,
does anybody observe this warnings too, after installing Update Rollup 25 for Exchange 2010 SP3 on CAS Servers?
As far as i can see, my CAS Servers are working as expected, once in a while these events are triggered.
I can´t figure out, if it´s a real problem...
regards
Juergen
Log Name: Application
Source: ASP.NET 2.0.50727.0
Date: 16.01.2019 12:11:50
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: CASSERVER.domain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 16.01.2019 12:11:50
Event time (UTC): 16.01.2019 11:11:50
Event ID: 6e3291bd6ecd4a6896e18720cccaf25a
Event sequence: 50235
Event occurrence: 20
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/1/ROOT/owa-1-131920993949375000
Trust level: Full
Application Virtual Path: /owa
Application Path: C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\
Machine name: CASSERVER
Process information:
Process ID: 5268
Process name: w3wp.exe
Account name: NT AUTHORITY\SYSTEM
Exception information:
Exception type: OwaInvalidCanaryException
Exception message:
Request information:
Request URL: https://exchangefqdn.domain.com:443/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0
Request path: /owa/ev.owa
User host address: CLIENTIP
User: DOMAIN\USERID
Is authenticated: True
Authentication Type: Basic
Thread account name: NT AUTHORITY\SYSTEM
Thread information:
Thread ID: 1
Thread account name: NT AUTHORITY\SYSTEM
Is impersonating: False
Stack trace: at Microsoft.Exchange.Clients.Owa.Core.Utilities.CompareCanary(List`1 canariesFromRequest, String canaryFromCookie)
at Microsoft.Exchange.Clients.Owa.Core.OwaEventHttpHandler.ProcessRequest(HttpContext httpContext)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Custom event details:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ASP.NET 2.0.50727.0" />
<EventID Qualifiers="32768">1309</EventID>
<Level>3</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-01-16T11:11:50.000000000Z" />
<EventRecordID>1351177</EventRecordID>
<Channel>Application</Channel>
<Computer>CASSERVER.domain.com</Computer>
<Security />
</System>
<EventData>
<Data>3005</Data>
<Data>An unhandled exception has occurred.</Data>
<Data>16.01.2019 12:11:50</Data>
<Data>16.01.2019 11:11:50</Data>
<Data>6e3291bd6ecd4a6896e18720cccaf25a</Data>
<Data>50235</Data>
<Data>20</Data>
<Data>0</Data>
<Data>/LM/W3SVC/1/ROOT/owa-1-131920993949375000</Data>
<Data>Full</Data>
<Data>/owa</Data>
<Data>C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\</Data>
<Data>CASSERVER</Data>
<Data>
</Data>
<Data>5268</Data>
<Data>w3wp.exe</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>OwaInvalidCanaryException</Data>
<Data>
</Data>
<Data>https://exchangefqdn.domain.com:443/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&UA=0</Data>
<Data>/owa/ev.owa</Data>
<Data>SERVERIP</Data>
<Data>DOMAIN\USERID</Data>
<Data>True</Data>
<Data>Basic</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>1</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>False</Data>
<Data> at Microsoft.Exchange.Clients.Owa.Core.Utilities.CompareCanary(List`1 canariesFromRequest, String canaryFromCookie)
at Microsoft.Exchange.Clients.Owa.Core.OwaEventHttpHandler.ProcessRequest(HttpContext httpContext)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
</Data>
</EventData>
</Event>
Log Name: Application
Source: ASP.NET 2.0.50727.0
Date: 16.01.2019 11:42:16
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: CASSERVER.domain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 16.01.2019 11:42:16
Event time (UTC): 16.01.2019 10:42:16
Event ID: 13d71b3342a7466db1ce2fa8f0e2b5a8
Event sequence: 43495
Event occurrence: 14
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/1/ROOT/owa-1-131920993949375000
Trust level: Full
Application Virtual Path: /owa
Application Path: C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\
Machine name: XCAS2
Process information:
Process ID: 5268
Process name: w3wp.exe
Account name: NT AUTHORITY\SYSTEM
Exception information:
Exception type: OwaInvalidRequestException
Exception message: Invalid request. Line number: 1 Position: 213. Url: /owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread. Request body: . Parameter 'expId' is unknown.
Request information:
Request URL: https://exchangefqdn.domain.com:443/owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread
Request path: /owa/ev.owa
User host address: CLIENTIP
User: DOMAIN\USERID
Is authenticated: True
Authentication Type: Basic
Thread account name: NT AUTHORITY\SYSTEM
Thread information:
Thread ID: 20
Thread account name: NT AUTHORITY\SYSTEM
Is impersonating: False
Stack trace: at Microsoft.Exchange.Clients.Owa.Core.OwaEventXmlParser.ThrowParserException(String description)
at Microsoft.Exchange.Clients.Owa.Core.OwaEventParserBase.GetParamInfo(String name)
at Microsoft.Exchange.Clients.Owa.Core.OwaEventXmlParser.ParseChildEnd()
at Microsoft.Exchange.Clients.Owa.Core.OwaEventXmlParser.ParseParameters()
at Microsoft.Exchange.Clients.Owa.Core.OwaEventParserBase.Parse()
at Microsoft.Exchange.Clients.Owa.Core.OwaEventHttpHandler.ProcessRequest(HttpContext httpContext)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Custom event details:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ASP.NET 2.0.50727.0" />
<EventID Qualifiers="32768">1309</EventID>
<Level>3</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-01-16T10:42:16.000000000Z" />
<EventRecordID>1351163</EventRecordID>
<Channel>Application</Channel>
<Computer>CASSERVER.domain.com</Computer>
<Security />
</System>
<EventData>
<Data>3005</Data>
<Data>An unhandled exception has occurred.</Data>
<Data>16.01.2019 11:42:16</Data>
<Data>16.01.2019 10:42:16</Data>
<Data>13d71b3342a7466db1ce2fa8f0e2b5a8</Data>
<Data>43495</Data>
<Data>14</Data>
<Data>0</Data>
<Data>/LM/W3SVC/1/ROOT/owa-1-131920993949375000</Data>
<Data>Full</Data>
<Data>/owa</Data>
<Data>C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\</Data>
<Data>CASSERVER</Data>
<Data>
</Data>
<Data>5268</Data>
<Data>w3wp.exe</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>OwaInvalidRequestException</Data>
<Data>Invalid request. Line number: 1 Position: 213. Url: /owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread. Request body: . Parameter 'expId' is unknown.</Data>
<Data>https://exchangefqdn.domain.com:443/owa/ev.owa?oeh=1&ns=MsgVLV2&ev=Preread</Data>
<Data>/owa/ev.owa</Data>
<Data>CLIENTIP</Data>
<Data>DOMAIN\USERID</Data>
<Data>True</Data>
<Data>Basic</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>20</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>False</Data>
<Data> at Microsoft.Exchange.Clients.Owa.Core.OwaEventXmlParser.ThrowParserException(String description)
at Microsoft.Exchange.Clients.Owa.Core.OwaEventParserBase.GetParamInfo(String name)
at Microsoft.Exchange.Clients.Owa.Core.OwaEventXmlParser.ParseChildEnd()
at Microsoft.Exchange.Clients.Owa.Core.OwaEventXmlParser.ParseParameters()
at Microsoft.Exchange.Clients.Owa.Core.OwaEventParserBase.Parse()
at Microsoft.Exchange.Clients.Owa.Core.OwaEventHttpHandler.ProcessRequest(HttpContext httpContext)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
</Data>
</EventData>
</Event>
Log Name: Application
Source: ASP.NET 2.0.50727.0
Date: 16.01.2019 13:52:51
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: CASSERVER.domain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 16/01/2019 13:52:51
Event time (UTC): 16/01/2019 12:52:51
Event ID: 1f72fe6941be4eea8e15e234c22ace23
Event sequence: 70053
Event occurrence: 70
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/1/ROOT/owa-1-131920993949375000
Trust level: Full
Application Virtual Path: /owa
Application Path: C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\
Machine name: CASSERVER
Process information:
Process ID: 5268
Process name: w3wp.exe
Account name: NT AUTHORITY\SYSTEM
Exception information:
Exception type: MapiExceptionNotFound
Exception message: MapiExceptionNotFound: Unable to get properties on object. (hr=0x8004010f, ec=-2147221233)
Diagnostic context:
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=597]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0x0][length=378][latency=0]
Lid: 23226 --- ROP Parse Start ---
Lid: 27962 ROP: ropOpenMessage [3]
Lid: 17082 ROP Error: 0x8004010F
Lid: 26977
Lid: 21921 StoreEc: 0x8004010F
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropOpenMessage [3]
Lid: 23921 StoreEc: 0x3EC
Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040
Lid: 23921 StoreEc: 0x3EC
Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D2F0003
Lid: 23921 StoreEc: 0x3EC
Lid: 21970 StoreEc: 0x8004010F PropTag: 0x672D0003
Lid: 23921 StoreEc: 0x3EC
Lid: 21970 StoreEc: 0x8004010F PropTag: 0x672F0014
Lid: 64937 dwParam: 0x83A7B7D9
Lid: 43123 dwParam: 0x1948DC
Lid: 60457 StoreEc: 0x8004010F
Lid: 4353 StoreEc: 0x8004010F
Lid: 19418
Lid: 6153 StoreEc: 0x8004010F
Lid: 21810
Lid: 5249 StoreEc: 0x8004010F
Lid: 37123
Lid: 59651 StoreEc: 0x8004010F
Lid: 1750 ---- Remote Context End ----
Lid: 27962 ROP: ropGetPropsSpecific [7]
Lid: 17082 ROP Error: 0x4B9
Lid: 26465
Lid: 21921 StoreEc: 0x4B9
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropGetPropsSpecific [7]
Lid: 36739
Lid: 1750 ---- Remote Context End ----
Lid: 26849
Lid: 21817 ROP Failure: 0x4B9
Lid: 20385
Lid: 28577 StoreEc: 0x8004010F
Lid: 32001
Lid: 29953 StoreEc: 0x8004010F
Request information:
Request URL: https://exchangefqdn.domain.com:443/owa/attachment.ashx?attach=1&id=RgAAAABmGAn unhandled exception has occurred.f3kfROvT6IyA5xFkEEGBwBwqJp4SquYQbmZz62QubuYAAAAGUjcAABwqJp4SquYQbmZz62QubuYAACDp7fZAAAJ&attid0=BAAAAAAA&attcnt=1
Request path: /owa/attachment.ashx
User host address: CLIENTIP
User: DOMAIN\USERID
Is authenticated: True
Authentication Type: Negotiate
Thread account name: NT AUTHORITY\SYSTEM
Thread information:
Thread ID: 1
Thread account name: NT AUTHORITY\SYSTEM
Is impersonating: False
Stack trace: at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, SafeExInterfaceHandle iUnknown, Exception innerException)
at Microsoft.Mapi.MapiProp.GetProps(ICollection`1 propTagsRequested)
at Microsoft.Exchange.Data.Storage.MapiPropertyBag.GetProperties(IList`1 propertyDefinitions)
Custom event details:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ASP.NET 2.0.50727.0" />
<EventID Qualifiers="32768">1309</EventID>
<Level>3</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-01-16T12:52:51.000000000Z" />
<EventRecordID>1351222</EventRecordID>
<Channel>Application</Channel>
<Computer>CASSERVER.domain.com</Computer>
<Security />
</System>
<EventData>
<Data>3005</Data>
<Data>An unhandled exception has occurred.</Data>
<Data>16/01/2019 13:52:51</Data>
<Data>16/01/2019 12:52:51</Data>
<Data>1f72fe6941be4eea8e15e234c22ace23</Data>
<Data>70053</Data>
<Data>70</Data>
<Data>0</Data>
<Data>/LM/W3SVC/1/ROOT/owa-1-131920993949375000</Data>
<Data>Full</Data>
<Data>/owa</Data>
<Data>C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\</Data>
<Data>CASSERVER</Data>
<Data>
</Data>
<Data>5268</Data>
<Data>w3wp.exe</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>MapiExceptionNotFound</Data>
<Data>MapiExceptionNotFound: Unable to get properties on object. (hr=0x8004010f, ec=-2147221233)
Diagnostic context:
Lid: 55847 EMSMDBPOOL.EcPoolSessionDoRpc called [length=597]
Lid: 43559 EMSMDBPOOL.EcPoolSessionDoRpc returned [ec=0x0][length=378][latency=0]
Lid: 23226 --- ROP Parse Start ---
Lid: 27962 ROP: ropOpenMessage [3]
Lid: 17082 ROP Error: 0x8004010F
Lid: 26977
Lid: 21921 StoreEc: 0x8004010F
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropOpenMessage [3]
Lid: 23921 StoreEc: 0x3EC
Lid: 21970 StoreEc: 0x8004010F PropTag: 0x668F0040
Lid: 23921 StoreEc: 0x3EC
Lid: 21970 StoreEc: 0x8004010F PropTag: 0x3D2F0003
Lid: 23921 StoreEc: 0x3EC
Lid: 21970 StoreEc: 0x8004010F PropTag: 0x672D0003
Lid: 23921 StoreEc: 0x3EC
Lid: 21970 StoreEc: 0x8004010F PropTag: 0x672F0014
Lid: 64937 dwParam: 0x83A7B7D9
Lid: 43123 dwParam: 0x1948DC
Lid: 60457 StoreEc: 0x8004010F
Lid: 4353 StoreEc: 0x8004010F
Lid: 19418
Lid: 6153 StoreEc: 0x8004010F
Lid: 21810
Lid: 5249 StoreEc: 0x8004010F
Lid: 37123
Lid: 59651 StoreEc: 0x8004010F
Lid: 1750 ---- Remote Context End ----
Lid: 27962 ROP: ropGetPropsSpecific [7]
Lid: 17082 ROP Error: 0x4B9
Lid: 26465
Lid: 21921 StoreEc: 0x4B9
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropGetPropsSpecific [7]
Lid: 36739
Lid: 1750 ---- Remote Context End ----
Lid: 26849
Lid: 21817 ROP Failure: 0x4B9
Lid: 20385
Lid: 28577 StoreEc: 0x8004010F
Lid: 32001
Lid: 29953 StoreEc: 0x8004010F</Data>
<Data>https://exchangefqdn.domain.com:443/owa/attachment.ashx?attach=1&id=RgAAAABmG%2f3kfROvT6IyA5xFkEEGBwBwqJp4SquYQbmZz62QubuYAAAAGUjcAABwqJp4SquYQbmZz62QubuYAACDp7fZAAAJ&attid0=BAAAAAAA&attcnt=1</Data>
<Data>/owa/attachment.ashx</Data>
<Data>CLIENTIP</Data>
<Data>DOMAIN\USERID</Data>
<Data>True</Data>
<Data>Negotiate</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>1</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>False</Data>
<Data> at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, SafeExInterfaceHandle iUnknown, Exception innerException)
at Microsoft.Mapi.MapiProp.GetProps(ICollection`1 propTagsRequested)
at Microsoft.Exchange.Data.Storage.MapiPropertyBag.GetProperties(IList`1 propertyDefinitions)
</Data>
</EventData>
</Event>
Log Name: Application
Source: ASP.NET 2.0.50727.0
Date: 2019-01-17 14:27:50
Event ID: 1309
Task Category: Web Event
Level: Warning
Keywords: Classic
User: N/A
Computer: CASSERVER.domain.com
Description:
Event code: 3005
Event message: An unhandled exception has occurred.
Event time: 17.01.2019 14:27:50
Event time (UTC): 17.01.2019 13:27:50
Event ID: 179ed1bfde624d26aae44fa5ce28e272
Event sequence: 248499
Event occurrence: 605
Event detail code: 0
Application information:
Application domain: /LM/W3SVC/1/ROOT/owa-1-131920993949375000
Trust level: Full
Application Virtual Path: /owa
Application Path: C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\
Machine name: CASSERVER
Process information:
Process ID: 5268
Process name: w3wp.exe
Account name: NT AUTHORITY\SYSTEM
Exception information:
Exception type: ApplicationException
Exception message: This operation returned because the timeout period expired. (Exception from HRESULT: 0x800705B4)
Request information:
Request URL: https://exchangefqdn.domain.com:443/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0
Request path: /owa/ev.owa
User host address: CLIENTIP
User: DOMAIN\USERID
Is authenticated: True
Authentication Type: Basic
Thread account name: NT AUTHORITY\SYSTEM
Thread information:
Thread ID: 1
Thread account name: NT AUTHORITY\SYSTEM
Is impersonating: False
Stack trace: at System.Threading.ReaderWriterLock.AcquireWriterLockInternal(Int32 millisecondsTimeout)
at Microsoft.Exchange.Clients.Owa.Core.OwaRWLockWrapper.Lock(Int32 exactTimeout, Boolean lockWriter)
Custom event details:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ASP.NET 2.0.50727.0" />
<EventID Qualifiers="32768">1309</EventID>
<Level>3</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-01-17T13:27:50.000000000Z" />
<EventRecordID>1355138</EventRecordID>
<Channel>Application</Channel>
<Computer>CASSERVER.domain.com</Computer>
<Security />
</System>
<EventData>
<Data>3005</Data>
<Data>An unhandled exception has occurred.</Data>
<Data>17.01.2019 14:27:50</Data>
<Data>17.01.2019 13:27:50</Data>
<Data>179ed1bfde624d26aae44fa5ce28e272</Data>
<Data>248499</Data>
<Data>605</Data>
<Data>0</Data>
<Data>/LM/W3SVC/1/ROOT/owa-1-131920993949375000</Data>
<Data>Full</Data>
<Data>/owa</Data>
<Data>C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\owa\</Data>
<Data>CASSERVER</Data>
<Data>
</Data>
<Data>5268</Data>
<Data>w3wp.exe</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>ApplicationException</Data>
<Data>This operation returned because the timeout period expired. (Exception from HRESULT: 0x800705B4)</Data>
<Data>https://exchangefqdn.domain.com:443/owa/ev.owa?oeh=1&ns=PendingRequest&ev=FinishNotificationRequest&Fn=1&UA=0</Data>
<Data>/owa/ev.owa</Data>
<Data>CLIENTIP</Data>
<Data>DOMAIN\USERID</Data>
<Data>True</Data>
<Data>Basic</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>1</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>False</Data>
<Data> at System.Threading.ReaderWriterLock.AcquireWriterLockInternal(Int32 millisecondsTimeout)
at Microsoft.Exchange.Clients.Owa.Core.OwaRWLockWrapper.Lock(Int32 exactTimeout, Boolean lockWriter)
</Data>
</EventData>
</Event>